Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/XKeLcvrAcDy2CBE53kEICVMlqV8.roa
File: XKeLcvrAcDy2CBE53kEICVMlqV8.roa (raw, json)
Hash identifier: goTBC3WPhIfw+uUjeppLMS6iCdZhQHgq5Cpw4nw8X+s=
Subject key identifier: 5C:A7:8B:72:FA:C0:70:3C:B6:08:11:39:DE:41:08:09:53:25:A9:5F
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018CC64A12CE2D478276BDB07C8B6AD6AB11
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/XKeLcvrAcDy2CBE53kEICVMlqV8.roa
Signing time: Mon 01 Jan 2024 18:29:52 +0000
ROA not before: Mon 01 Jan 2024 18:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216327
IP address blocks: 2a12:bec0:450::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:12:ce:2d:47:82:76:bd:b0:7c:8b:6a:d6:ab:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 18:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ca78b72fac0703cb6081139de4108095325a95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:68:46:15:24:0e:9c:ae:3d:d1:0d:e4:5b:f3:
6d:a1:fa:f6:55:e6:68:5c:c5:f3:98:64:85:77:c7:
4a:bc:9f:f3:c1:ef:5c:57:97:b6:b5:20:65:28:42:
fa:13:fe:f5:6b:fa:c2:dc:64:58:0c:25:3d:46:c5:
26:d6:d5:19:01:6c:47:2f:9c:9d:ad:34:d2:5c:49:
cf:ed:5d:23:b3:d7:4b:ae:0e:21:46:0b:76:1b:a2:
f7:3f:86:5d:06:64:72:01:75:a6:74:96:ba:2f:b5:
2e:e1:cd:c0:43:c2:0a:23:85:ea:5d:0e:eb:6e:94:
a5:81:95:8d:fd:f3:47:d7:02:9a:aa:89:68:5d:e8:
05:79:1a:59:f3:df:36:fb:86:6c:d0:23:0d:ae:90:
4f:74:96:58:56:70:c5:c8:75:6e:f6:54:13:e7:16:
0f:4b:2c:2b:07:4b:5f:6d:cd:a2:43:fd:ff:82:be:
26:7a:2c:96:5b:60:d4:8b:78:d3:37:60:cc:ba:f3:
46:b2:ac:09:bc:94:fe:f2:96:da:e8:a5:ad:71:f6:
31:fd:b3:26:30:06:9c:67:2f:ed:38:41:f6:f6:3c:
3e:62:d5:29:31:c6:5d:e3:8f:30:5c:44:ba:66:80:
80:81:ff:cc:58:49:ca:c8:7e:c6:ea:f2:bc:50:76:
8d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A7:8B:72:FA:C0:70:3C:B6:08:11:39:DE:41:08:09:53:25:A9:5F
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/XKeLcvrAcDy2CBE53kEICVMlqV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:450::/44
Signature Algorithm: sha256WithRSAEncryption
61:f7:96:da:7a:12:0c:05:5a:92:8c:7b:82:2e:2b:3b:8b:c8:
08:7b:03:c4:d4:49:a8:20:56:1c:35:30:bb:58:ec:ff:eb:61:
2f:64:c7:13:cd:04:f4:57:b0:5c:3d:79:35:31:71:45:bd:62:
75:16:59:cd:00:09:68:29:99:85:97:90:ec:d4:64:34:a4:e9:
bb:a1:33:1f:81:37:3b:c2:ef:de:55:a1:d6:7f:cc:1d:c3:40:
a7:42:4b:e7:81:87:38:bc:31:1c:c3:32:ce:ea:9e:fc:e9:8c:
ef:39:b3:4c:36:4d:b8:1e:59:cb:f5:5a:13:5a:58:4a:11:b4:
fb:5b:90:95:1f:d9:d3:75:bb:05:1a:0d:09:62:c7:a3:85:39:
49:ea:6e:c8:2f:76:73:78:92:8a:bc:24:a3:16:4d:1a:0f:b9:
a3:c9:08:8e:45:cc:83:77:1a:de:43:e9:47:0e:27:fb:38:ff:
a6:ba:52:19:b5:b7:fe:91:41:d6:17:9d:51:d1:22:94:65:dc:
97:49:81:ca:7f:54:c7:4f:02:3a:26:9e:b6:d5:63:f9:ac:c5:
61:36:ca:74:7b:ad:c2:fa:8a:07:a6:98:f3:e4:db:d7:ab:11:
2f:17:fc:ff:a0:81:5b:11:17:82:5f:82:59:88:a7:23:a7:ca:
cf:43:2b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:13:26 2024 by rpki-client on console-ams.rpki-client.org